[ Vendor · 6 CVEs ]
Saltstack
CVEs affecting Saltstack published in the last 30 days, plus any Saltstack CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2020-16846 | 6 Nov 2020 | CVSS 9.8 | SaltStack Salt Shell InjectionAn issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in… | Exploited |
| CVE-2020-16846 | 6 Nov 2020 | CVSS 9.8 | SaltStack Salt Shell InjectionAn issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in… | Exploited |
| CVE-2020-11651 | 30 Apr 2020 | CVSS 9.8 | SaltStack Salt Authentication BypassAn issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate… | Exploited |
| CVE-2020-11651 | 30 Apr 2020 | CVSS 9.8 | SaltStack Salt Authentication BypassAn issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate… | Exploited |
| CVE-2020-11652 | 30 Apr 2020 | CVSS 6.5 | SaltStack Salt Path TraversalAn issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some… | Exploited |
| CVE-2020-11652 | 30 Apr 2020 | CVSS 6.5 | SaltStack Salt Path TraversalAn issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some… | Exploited |